CVE-2026-81699 in openssl_encrypt
Sumário
de MITRE • 27/08/2026
openssl_encrypt versions before 1.4.9 fail to properly validate key derivation function costs in crafted files, allowing attackers to trigger unbounded memory and CPU exhaustion during pre-authentication processing. Attackers can supply malicious files with excessive KDF parameters to exhaust system resources and crash or wedge the process before password verification occurs.
If you want to get best quality of vulnerability data, you may have to visit VulDB.